CVE-2026-31573

CVE-2026-31573

Medium · published April 24, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: verisilicon: Fix kernel panic due to __initconst misuse

Fix a kernel panic when probing the driver as a module:

Unable to handle kernel paging request at virtual address

ffffd9c18eb05000

of_find_matching_node_and_match+0x5c/0x1a0

hantro_probe+0x2f4/0x7d0 [hantro_vpu]

The imx8mq_vpu_shared_resources array is referenced by variant

structures through their shared_devices field. When built as a

module, __initconst causes this data to be freed after module

init, but it's later accessed during probe, causing a page fault.

The imx8mq_vpu_shared_resources is referenced from non-init code,

so keeping __initconst or __initconst_or_module here is wrong.

Drop the __initconst annotation and let it live in the normal .rodata

section.

A bug of __initconst called from regular non-init probe code

leading to bugs during probe deferrals or during unbind-bind cycles.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2026-04-24T19:16Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 6.19.6, < 6.19.116.19.11
References (4)
EPSS history
Timeline
  • 24 APR 14:35Z
    media: verisilicon: Fix kernel panic due to __initconst misuse
    cvelistv5